# MA-688.112017: MyCERT Advisory - Intel Firmware Vulnerability

**Date:** 24 Nov 2017  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-688.112017  
**Advisory ID:** MA-688.112017

---

**1.0 Introduction**
Intel has released recommendations to address a vulnerability in the firmware of Intel Active Management Technology (AMT), Intel Standard Manageability (ISM) and Intel Small Business Technology. Intel has identified security vulnerabilities that could potentially impact certain PCs, servers, and IoT platforms.
**2.0 Impact**
An attacker could exploit this vulnerability to take control of an affected system.
**3.0 Affected Product**
• 6th, 7th & 8th Generation Intel Core™ Processor Family
• Intel Xeon Processor E3-1200 v5 & v6 Product Family
• Intel Xeon Processor Scalable Family
• Intel Xeon Processor W Family
• Intel Atom C3000 Processor Family
• Apollo Lake Intel Atom Processor E3900 series
• Apollo Lake Intel Pentium
• Celeron™ N and J series Processors
**4.0 Recommendation**
MyCERT highly recommended users to review and adhere to the information provided at the below URL:
• <https://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00086&languageid=en-fr>
• <https://www.intel.com/content/www/us/en/support/articles/000025619/software.html>
• <https://downloadcenter.intel.com/download/27150>
Generally, MyCERT advises the users of this product to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further inquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#dcbfa5beb9aee5e5e59cbfa5beb9aeafb9bfa9aeb5a8a5f2b1a5) or [[email protected]](mycert@mycert.org.my)
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442
Handphone: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: <https://www.mycert.org.my>
Twitter: <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
• <https://www.us-cert.gov/ncas/current-activity/2017/11/21/Intel-Firmware-Vulnerability>